Implementing GraphQL API security best practices with AWS AppSync